question

Rich3236-2636 avatar image
0 Votes"
Rich3236-2636 asked vipulsparsh-MSFT commented

Microsoft 365 logs not ingesting into Sentinel

Good afternoon all.

I'm having issues with Azure Sentinel, I have a global administrator account and I have created a Office 365 connector to our instance. All appears green as shown below but I am not receiving any logs on any of them.

140570-shot-of-azure-sentinel-instance.png



Anyone experienced this and know how i can fix it?

Regards

microsoft-sentinel
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@Rich3236-2636 I just wanted to check in and see if you had any other questions or if you were able to resolve this issue? If you have any other questions, please let us know.
Thank you for your time and patience throughout this issue.


==================================================================================================
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

0 Votes 0 ·

1 Answer

MarileeTurscak-MSFT avatar image
0 Votes"
MarileeTurscak-MSFT answered

Hi @Rich3236-2636,

It appears that your data sources are failing to connect. In your screenshot the "Data types" section is grey rather than green like it would be if the sources were connected. You need to make sure that you have met the prerequisites listed on the top right and have applied the configuration settings.

You can also check under the Logs section on the left and run a query against the data.

If you have met all of the prerequisites, I would recommend disconnecting and connecting back with the global admin tenant permissions. If the issue persists after reconnecting, you may need to look into the activities settings and permission on the Sharepoint, Teams, and Exchange side.

Let me know if this helps!

Marilee

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.